CVE-2022-30525
Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS
—
No CVSS
EPSS
99.9%
p100
KEV
YES
May 16, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
99.9%EPSS · 30 days99.9%
2026-08-022026-08-30
Product
Zyxel / Multiple Firewalls
Vulnerability
Zyxel Multiple Firewalls OS Command Injection Vulnerability
Added to KEV
May 16, 2022
Remediate by
Jun 6, 2022
Known ransomware use
No
Summary description
A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-30525
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-116677.5 HIG86.4%
KEV—76Zyxel Multiple Firewalls Path Traversal Vulnerability26dCVE-2023-28771—99.9%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2023-33010—98.0%
KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—CVE-2023-33009—98.0%
KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—